Fixed bug.  Beware! It's still true that *anyone* is USER_TYPE_PUBLIC.  Use if(logintest2()) to test whether signed in (therefore at least a registered user.
Merge /www/htdocs/t3/wheatplus